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AMENDMENTS TO THE CUUMS 

Please add or amend the claims to read as follows, and cancel without 
prejudice or disclaimer to resubmission in a divisional or continuation application 
claims indicated as cancelled: 

1. (Amended) A method for filtered application-to-application communication of 
applications running on computing platforms including an operating system kernel, 
said method comprising: 

providing a communication interface to an application , wherein the 
communication interface bypasses a substantial portion of the operating system 
kernel: 

filtering application data received from a process of said application according to 
a predetennined policy; and 

providing said filtered application data directly to communication hardware by 
bypassing a substantial portion of the operating system kernel . 

2. (Original) The method of claim 1 further comprising: 

verifying the identity of said application prior to providing said filtered 
application data. 

3. (Original) The method of claim 2 further comprising: 

sending at least one security token. 

4. (Original) The method of claim 1 further comprising: 

verifying the identity of a machine participating in said process prior to providing 
said filtered application data. 

5. (Original) The method of claim 4 further comprising: 
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sending at least one security token. 

6. (Original) The method of claim 1, wherein providing said filtered application data 
comprises providing said filtered application data directly to a multi-channel network 
interface card having direct user-to-hardware access. 

7. (Original) The method of claim 6, wherein said multi-channel network interface card 
is an InfiniBand card. 

8. (Amended) A method for filtered application-to-application communication of 
a pplications running on computing platforms including an operating system kernel, 
said method comprising: 

providing a communication interface to an applicatio n, wherein the 
communication interface bypasses a substantial portion of the operating system 
kernel : 

filtering application data received from a process of said application; 
sending an authentication request to an authentication service; 
receiving authentication information; and 

providing said filtered application data directly to communication hardware_by 
bypassing a substantial portion of the operating system kernel . 

9. (Original) The method of claim 8 further comprising: 

verifying the identity of said application prior to providing said filtered 
application data. 

1 0. (Original) The method of claim 9 further comprising: 

sending at least one security token 

1 1 . (Original) The method of claim 8 further comprising: 
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verifying the identity of a machine participating in said process prior to 
providing said filtered application data. 

12. (Original) Hie method of claim 1 1 further comprising: 

sending at least one security token 

13. (Original) The method of claim 8, wherein providing said filtered application data 
comprises providing said filtered application data directly to a multi-channel network 
interface card having direct user-to-hardware access. 

14. (Original) The method of claim 13, wherein said multi-channel network interface card 
is an InfiniBand card. 

15- (Amended) A system for filtered application-to-application communication of 
applications running on computing platforms including an operating system kernel. 
said method comprising: 

multi-channel communication hardware; and 

at least one application interface and filter operative to provide filtered data from 
an application process directly to said multi-channel communication hardwar e by 
bypassing a substantial portion of the operating system kernel . 

16. (Original) The system of claim 15, wherein said communication hardware is a multi- 
channel network interface card having direct user-to-hardware access. 

17. (Original) The system of claim 16, wherein said multi-channel network interface card 
is an InfiniBand card. 

18. (Amended) A system for filtered application-to-application communication of 
applications running on computing platforms including an operating system kernel, 
said method comprising: 
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multi-channel communication hardware; 

at least one application interface and filter operative to provide filtered data from 
an application process directly to said multi-channel communication hardware by 
bypassing a substantial portion of the operating system kernel : and 

at least one authentication service adapted to determine whether said application 
process is genuine and/or whether at least one machine participating in said 
application process is genuine. 

19. (Original) The system of claim 18, wherein said communication hardware is a multi- 
channel network interface card having a direct user-to-hardware access. 

20. (Original) The system of claim 19, wherein said multi-channel network interface card 
is an InfiniBand card. 
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